Heap-Based Buffer Over-Read in Tcpreplay by Appneta
CVE-2020-12740

9.1CRITICAL

Key Information:

Vendor: Broadcom
Status: Tcpreplay
Vendor: CVE Published:; 8 May 2020

What is CVE-2020-12740?

A vulnerability in Tcpreplay's tcprewrite component could lead to a heap-based buffer over-read. This occurs during a get_c operation, specifically in the get_ipv6_next() function found in common/get.c. Exploiting this flaw may allow an attacker to read sensitive memory content, which could lead to further compromise or information leakage.